MEIFP – Most Exploited Internet-Facing Products

Lantronix

Products: E210 series · E220 series · EDS5000 series · G520 series · X300 series

40.6

Score

CVEs

Active

PoC

KEV

#99

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-67038	2026-03-11	9.3v4.0	ACTIVE		Low	None	YES	40.6	E210 seriesE220 seriesEDS5000 seriesG520 seriesX300 series	An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3